Sending container logs to Splunk

I’ve been going through the documentation to get my container logs sent to Splunk. I’m able to validate the settings from the rancher UI and query the test message in Splunk. However, I don’t see any container logs getting sent afterwards. I’m at a loss as to where to look for any sort of issues Rancher may be having when trying to send logs.